Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.python > #80336 > unrolled thread

Python has arrived!

Back to article view | Back to comp.lang.python

Contents

  Python has arrived! Grant Edwards <invalid@invalid.invalid> - 2014-11-06 15:22 +0000
    Re: Python has arrived! Sturla Molden <sturla.molden@gmail.com> - 2014-11-07 03:45 +0000
    Re: Python has arrived! Ian Kelly <ian.g.kelly@gmail.com> - 2014-11-06 21:43 -0700
    Re: Python has arrived! Steve Hayes <hayesstw@telkomsa.net> - 2014-11-07 06:54 +0200
      Re: Python has arrived! Heinz Schmitz <HeinzSchmitz@gmx.net> - 2014-11-07 10:10 +0100
      Re: Python has arrived! Gregory Ewing <greg.ewing@canterbury.ac.nz> - 2014-11-07 22:15 +1300

#80336 — Python has arrived!

According to http://www.theregister.co.uk/2014/11/06/hackers_use_gmail_drafts_as_dead_drops_to_control_malware_bots:

  "Attacks occur in two phases. Hackers first infect a targeted
   machine via simple malware that installs Python onto the device,
   [...]"
   
-- 
Grant Edwards               grant.b.edwards        Yow! I always have fun
                                  at               because I'm out of my
                              gmail.com            mind!!!

[toc] | [next] | [standalone]

#80345

Grant Edwards <invalid@invalid.invalid> wrote:
> According to
> http://www.theregister.co.uk/2014/11/06/hackers_use_gmail_drafts_as_dead_drops_to_control_malware_bots:
> 
>   "Attacks occur in two phases. Hackers first infect a targeted
>    machine via simple malware that installs Python onto the device,
>    [...]"
>    

A virus that runs on Python. It had to happen sooner or later.

[toc] | [prev] | [next] | [standalone]

#80347

[Multipart message — attachments visible in raw view] — view raw

On Nov 6, 2014 10:47 PM, "Sturla Molden" <sturla.molden@gmail.com> wrote:
>
> Grant Edwards <invalid@invalid.invalid> wrote:
> > According to
> >
http://www.theregister.co.uk/2014/11/06/hackers_use_gmail_drafts_as_dead_drops_to_control_malware_bots
:
> >
> >   "Attacks occur in two phases. Hackers first infect a targeted
> >    machine via simple malware that installs Python onto the device,
> >    [...]"
> >
>
> A virus that runs on Python. It had to happen sooner or later.

It's not a Python virus. The infection vector can be anything. The
interesting part is that they're using browser automation to open a
real-time, encrypted, virtually undetectable and untraceable channel to the
malware over a port (443) that is frequently used and very rarely blocked,
via a host (gmail.com) that is also frequently used and rarely blocked (and
there would likely be plenty of alternatives to choose from if it were),
and without needing to create any sort of server on the target machine. The
fact that Python is involved is incidental.

[toc] | [prev] | [next] | [standalone]

#80353

On Thu, 6 Nov 2014 15:22:45 +0000 (UTC), Grant Edwards
<invalid@invalid.invalid> wrote:

>According to http://www.theregister.co.uk/2014/11/06/hackers_use_gmail_drafts_as_dead_drops_to_control_malware_bots:
>
>  "Attacks occur in two phases. Hackers first infect a targeted
>   machine via simple malware that installs Python onto the device,
>   [...]"
>   

404: Page not found


-- 
Steve Hayes from Tshwane, South Africa
Web:  http://www.khanya.org.za/stevesig.htm
Blog: http://khanya.wordpress.com
E-mail - see web page, or parse: shayes at dunelm full stop org full stop uk

[toc] | [prev] | [next] | [standalone]

#80354

Steve Hayes wrote:

>>According to http://www.theregister.co.uk/2014/11/06/hackers_use_gmail_drafts_as_dead_drops_to_control_malware_bots:
>>
>>  "Attacks occur in two phases. Hackers first infect a targeted
>>   machine via simple malware that installs Python onto the device,
>>   [...]"

>[Fri, 07 Nov 2014 06:54:54 +0200]
>404: Page not found

2014-11-07 10:06 MEZ   -> Page found.

Regards,
H.

[toc] | [prev] | [next] | [standalone]

#80355

Steve Hayes wrote:
> On Thu, 6 Nov 2014 15:22:45 +0000 (UTC), Grant Edwards
> <invalid@invalid.invalid> wrote:
> 
>>According to http://www.theregister.co.uk/2014/11/06/hackers_use_gmail_drafts_as_dead_drops_to_control_malware_bots:
> 
> 404: Page not found

Works if you remove the spurious colon from the end of the url.

-- 
Greg

[toc] | [prev] | [standalone]

Back to top | Article view | comp.lang.python

csiph-web